<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->


<!DOCTYPE html
  PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="zh-cn" xml:lang="zh-cn">
<head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
   
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="DC.Type" content="topic">
<meta name="DC.Title" content="步骤1：（可选）开启安全加密模式">
<meta name="product" content="">
<meta name="DC.Relation" scheme="URI" content="ES_gud_00011.html">
<meta name="prodname" content="">
<meta name="version" content="">
<meta name="brand" content="30-OceanProtect 备份一体机 1.5.0-1.6.0 帮助中心">
<meta name="DC.Publisher" content="20240320">
<meta name="prodname" content="csbs">
<meta name="documenttype" content="usermanual">
<meta name="DC.Format" content="XHTML">
<meta name="DC.Identifier" content="ES_gud_00012">
<meta name="DC.Language" content="zh-cn">
<link rel="stylesheet" type="text/css" href="public_sys-resources/commonltr.css">
<title>步骤1：（可选）开启安全加密模式</title>
</head>
<body style="clear:both; padding-left:10px; padding-top:5px; padding-right:5px; padding-bottom:5px"><a name="ES_gud_00012"></a><a name="ES_gud_00012"></a>

<h1 class="topictitle1">步骤1：（可选）开启安全加密模式</h1>
<div><p>如果您希望<span>OceanProtect</span>与大数据平台通信过程中进行数据加密，实现安全通信，请参考本节在大数据平台开启安全加密模式并导入CA证书。否则可忽略本节。</p>
<div class="section"><h4 class="sectiontitle">背景信息</h4><p>本节以FusionInsight Manager 8.2.0版本为例说明相关操作。不同大数据平台操作略有差异，请参考对应大数据平台的产品文档。</p>
</div>
<div class="section"><h4 class="sectiontitle">开启安全加密模式</h4><ol><li><span>使用浏览器，登录FusionInsight Manager。</span></li><li><span>选择<span class="uicontrol">“集群 &gt; Elasticsearch”</span>。</span></li><li><span>单击<span class="uicontrol">“配置”</span>。</span></li><li><span>搜索关键字<span class="uicontrol">“SSL”</span>，查询到以下参数，将其设置为<span class="uicontrol">“true”</span>。</span><p><p><span><img src="zh-cn_image_0000001792354138.png"></span></p>
</p></li></ol>
</div>
<div class="section" id="ES_gud_00012__section6706354142710"><a name="ES_gud_00012__section6706354142710"></a><a name="section6706354142710"></a><h4 class="sectiontitle">获取并导入证书</h4><ul><li>当大数据平台为MRS。<p>获取CA证书并在大数据平台更换证书，请妥善保管获取到的证书，后续注册ElasticSearch集群时需要使用。具体操作可参考<a href="https://support.huawei.com/enterprise/zh/cloud-computing/mapreduce-service-pid-22396131" target="_blank" rel="noopener noreferrer">《 MapReduce服务(MRS) x.x.x-LTS 使用指南(for 华为云Stack x.x.x) 》</a>中的<span class="parmvalue">“更换CA证书”</span>章节。</p>
</li><li>当生产环境为原生Elasticsearch。<p>可登录ElasticSearch节点，进入ElasticSearch安装目录的<strong>config/certs</strong>目录下，找到<strong>http-ca.crt</strong>证书文件并下载获取（证书文件在安装Elasticsearch时已配置，不需要单独导入）。</p>
</li></ul>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>父主题：</strong> <a href="ES_gud_00011.html">备份Elasticsearch集群</a></div>
</div>
</div>

<div class="hrcopyright"><hr size="2"></div><div class="hwcopyright">版权所有 &copy; 华为技术有限公司</div></body>
</html>